CVE-2020-27249: Heap-based Buffer Overflow

A specially crafted document can cause the document parser to copy data from a particular record type into a static-sized buffer within an object that is smaller than the size used for the copy, which will cause a heap-based buffer overflow. In version/Instance 0x0004 and 0x0015, an attacker can...

PT-2021-11344 · Softmaker · Softmaker Office Planmaker 2021

Name of the Vulnerable Software and Affected Versions: SoftMaker Office PlanMaker 2021 Revision 1014 Description: A specially crafted document can cause the document parser to copy data from a particular record type into a static-sized buffer within an object that is smaller than the size used fo...

CVE-2020-27248: Heap-based Buffer Overflow

A specially crafted document can cause the document parser to copy data from a particular record type into a static-sized buffer within an object that is smaller than the size used for the copy, which will cause a heap-based buffer overflow. In version/Instance 0x0003 and 0x0014, an attacker can...

CVE-2020-13579: Integer Overflow or Wraparound

An exploitable integer overflow vulnerability exists in the PlanMaker document parsing functionality of SoftMaker Office 2021’s PlanMaker application. A specially crafted document can cause the document parser perform arithmetic that may overflow which can result in an undersized heap allocation...

CVE-2020-13580: Out-of-bounds Write

An exploitable heap-based buffer overflow vulnerability exists in the PlanMaker document parsing functionality of SoftMaker Office 2021’s PlanMaker application. A specially crafted document can cause the document parser to explicitly trust a length from a particular record type and use it to writ...

CVE-2020-13586: Heap-based Buffer Overflow

A memory corruption vulnerability exists in the Excel Document SST Record 0x00fc functionality of SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 Revision 1014. A specially crafted malformed file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this...

PT-2021-11345 · Softmaker · Softmaker Office Planmaker 2021

Name of the Vulnerable Software and Affected Versions: SoftMaker Office PlanMaker 2021 Revision 1014 Description: A specially crafted document can cause the document parser to copy data from a particular record type into a static-sized buffer within an object that is smaller than the size used fo...

CVE-2020-27247: Heap-based Buffer Overflow

A specially crafted document can cause the document parser to copy data from a particular record type into a static-sized buffer within an object that is smaller than the size used for the copy, which will cause a heap-based buffer overflow. In version/Instance 0x0002, an attacker can entice the...

Vulnerability Spotlight: Multiple vulnerabilities in SoftMaker Office PlanMaker

Discovered by a Cisco Talos researcher. Blog by Jon Munshaw. SoftMaker's Office PlanMaker contains multiple vulnerabilities that could allow an adversary to cause a variety of malicious conditions in the software. SoftMaker's flagship product, SoftMaker Office, is supported on a variety of...

SoftMaker Office PlanMaker 缓冲区错误漏洞

SoftMaker Office PlanMaker is a spreadsheet suite in office software that supports multiple platforms. A buffer overflow vulnerability exists in the SoftMaker Office PlanMaker Version/Instance 0x0005/0x0016 field handling, which can be exploited by an attacker to crash the application or execute...

SoftMaker Office PlanMaker 输入验证错误漏洞

SoftMaker Office PlanMaker is a German Softmaker SoftMaker company supports multi-platform office software in the spreadsheet suite. An integer overflow vulnerability exists in SoftMaker Office PlanMaker 2021, which can be exploited by an attacker to execute code within the context of the...

SoftMaker Office PlanMaker Excel document CEscherObject::ReadNativeProperties multiple heap buffer overflow vulnerabilities

Summary An exploitable heap-based buffer overflow vulnerability exists in the Office Art record-parsing functionality of SoftMaker Office 2021’s PlanMaker application. A specially crafted document can cause the document parser to copy data from a particular record type into a static-sized buffer...

SoftMaker Office PlanMaker 缓冲区错误漏洞

SoftMaker Office PlanMaker is a German Softmaker SoftMaker company supports multi-platform office software in the spreadsheet suite. A buffer overflow vulnerability exists in SoftMaker Office PlanMaker 2021, which stems from a lack of boundary checking on the value, and can be exploited by an...

SoftMaker Office PlanMaker 缓冲区错误漏洞

SoftMaker Office PlanMaker is a German Softmaker SoftMaker company supports multi-platform office software in the spreadsheet suite. A buffer overflow vulnerability exists in SoftMaker Office PlanMaker 2021, and no detailed vulnerability details are provided at this time...

SoftMaker Office PlanMaker 缓冲区错误漏洞

SoftMaker Office PlanMaker is a German Softmaker SoftMaker company supports multi-platform office software in the spreadsheet suite. A buffer overflow vulnerability exists in SoftMaker Office PlanMaker 2021. No detailed vulnerability details are provided at this time...

SoftMaker Office PlanMaker 缓冲区错误漏洞

SoftMaker Office PlanMaker is a German Softmaker SoftMaker company supports multi-platform office software in the spreadsheet suite. SoftMaker Software GmbH SoftMaker Office PlanMaker 2021 suffers from a memory corruption vulnerability that can be exploited by an attacker to cause a heap buffer...

SoftMaker Office PlanMaker 缓冲区错误漏洞

SoftMaker Office PlanMaker is a German Softmaker SoftMaker company supports multi-platform office software in the spreadsheet suite. A buffer overflow vulnerability exists in SoftMaker Office PlanMaker 2021, which can be exploited by an attacker to cause a heap-based buffer overflow...

SoftMaker Office PlanMaker 缓冲区错误漏洞

SoftMaker Office PlanMaker is a German Softmaker SoftMaker company supports multi-platform office software in the spreadsheet suite. SoftMaker Office PlanMaker 2021 suffers from a buffer overflow vulnerability that stems from a specially crafted document that could result in a heap-based buffer...

SoftMaker Office PlanMaker Document Record 0x800d memory corruption vulnerability

Summary An exploitable heap-based buffer overflow vulnerability exists in the PlanMaker document parsing functionality of SoftMaker Office 2021’s PlanMaker application. A specially crafted document can cause the document parser to copy data from a particular record type into a buffer that is...

SoftMaker Office PlanMaker 缓冲区错误漏洞

SoftMaker Office PlanMaker is a spreadsheet suite in office software that supports multiple platforms. A buffer overflow vulnerability exists in the SoftMaker Office PlanMaker Version/Instance 0x0005/0x0016 field handling, which can be exploited by an attacker to crash the application or execute...